diff options
| author |   Pauli Virtanen <pav@iki.fi> | 2026-07-25 12:59:20 +0300 |
|---|---|---|
| committer |   Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-07-28 16:13:13 -0400 |
| commit | 44fc74069d8988f2825246f9401218e29de2c0ab (patch) | |
| tree | 31d17594b0dfe235a68ae13b38e3d1e97434db52 /scripts/Makefile.thinlto | |
| parent | Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (diff) | |
Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback
There is theoretical UAF if the conn is freed while the hci_sync task is
running.
Hold refcount to avoid that.
Fixes: 6d0417e4e1cf ("Bluetooth: hci_conn: Fix not setting conn_timeout for Broadcast Receiver")
Signed-off-by: Pauli Virtanen <pav@iki.fi>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions